FGHFGH
FGJGFH
HFGHG
SDHHFD
Behavioral task
behavioral1
Sample
b0ca6901464c026893cf899ca5e53567_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b0ca6901464c026893cf899ca5e53567_JaffaCakes118
Size
516KB
MD5
b0ca6901464c026893cf899ca5e53567
SHA1
401c8b6b21589b3a614f74c0c65ea60e0dbc2a18
SHA256
e019d9917894dc1d736da4f821e6a19304d1a4984a8298aad1f395aee20c472e
SHA512
ca1f581ebc41ce4aca8c972d7f569a4b07023738a8eea735705087311ce56368bfffbd1700859a43514050690f5978ae919474459f969460f96a99264149cd41
SSDEEP
6144:C82G3bth6PFd4e2BthkqfX+ImNVYcW0bMItcMfOVZLgNMzNPlVnUWl+wh6FyAS++:193K7BETkW0b4MWuNM5fhldGq+Pvu
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
b0ca6901464c026893cf899ca5e53567_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
midiStreamRestart
WSAAsyncSelect
GetTimeZoneInformation
GetModuleHandleA
GetProcAddress
VirtualProtect
GetSubMenu
OffsetViewportOrgEx
OpenPrinterA
RegOpenKeyExA
ShellExecuteA
OleInitialize
LoadTypeLi
ord17
GetSaveFileNameA
FGHFGH
FGJGFH
HFGHG
SDHHFD
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ